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AMENDMENTS TO THE CLAIMS 

1 . (currently amended) A method for producing forgery-proof documents or data records using a 

security module, 

• whereby the security module generates a secret which remains unknown to a 
document producer and the document producer can not gain access to the secret which 
can only be encrypted by an authentication unit , 

• whereby the secret, together with information that reveals details about the 
identity of the security module, is transferred in encrypted form to an authentication unit, 

• whereby m tiie authentication unit decrypts the secret, recognizes the identity of 
the security module and encrypts the secret, together with information on the identity of 
the document producer, in such a way that only a checking unit can carry out a 
decryption and then the authentication unit transmits these to the document producer, 

• whereby the document producer transfers its own data to the security module, 
whereby the security module irreversibly links by hash encryption the secret with 

the data that the document producer itself has introduced, and 

• whereby it is not possible to draw conclusions about the secret[.] ^ 
characterized in that the result of the irreversible linking of the secret with the data 
introduced by the document producer, the data introduced by the document producer 
itself as well as the encrypted information of the authentication unit all serve to form the 
document that is transmitted to the checking unit. ' 

2. (Original) The method according to Claim 1, characterized in that the additional 

information transferred by the authentication unit contains details on the identity of the 
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document producer and on the period of validity of the documents generated by the 
document producer. 

3. (currently amended) The method for checking the authenticity of a document, characterized 

in that the checking unit checks whether the result of an irreversible linking bvhash 
encryption of a secret with data introduced by a document producer have been 
incorporated into the document, in that the checking unit decrypts the secret and 
additional information that were encrypted by an authentication unit, in that the checking 
unit irreversibly links the decrypted secret with the data introduced into the document by 
the document producer, in the same manner as a security module used to produce the 
forgery-proof document, and in that the checking unit compares the result of the 
irreversible linking that it has performed itself with the result of an irreversible linking 
that was performed by the docimient producer and incorporated into the document. 

4. (Original) The method according to Claim 3, characterized in that the comparison 

determines whether data introduced into the document by the document producer has 
been forged. 
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